Where
-Infinity
0

Trending

Last week
Last month
Last year

GLPI DataInjection pluginGLPI DataInjection Plugin Authenticated SQL Injection via CSV Import

Risk 62
Severity
7.1
First published (updated )
CVE-2026-11321

GLPIGLPI is Vulnerable to SSRF via Webhooks

Risk 72
Severity
9.1
First published (updated )
CVE-2026-22247

glpiGLPI has an unauthenticated SQL injection through the inventory endpoint

Risk 86
Severity
9.8
First published (updated )
CVE-2025-66417

GLPI GLPIGLPI allows authenticated remote code execution

Risk 82
Severity
8.8
First published (updated )
CVE-2025-24801

GLPI GLPIGLPI allows SQL injection through the rules configuration

Risk 86
Severity
9.8
First published (updated )
CVE-2025-21619
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)

First published (updated )
Social
reddit

GLPI GLPIGLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin

Risk 43
Severity
7.5
First published (updated )
CVE-2025-23046

GLPI GLPIGLPI: Plugins are disabled accessing one page

Risk 33
Severity
6.9
First published (updated )
CVE-2025-23024

GLPI GLPIGLPI Cross-site Scripting vulnerability

Risk 37
Severity
6.5
First published (updated )
CVE-2025-21627

GLPI GLPIGLPI vulnerable to exposure of sensitive information in the `status.php` endpoint

Risk 38
Severity
6.5
First published (updated )
CVE-2025-21626
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI GLPIGLPI index.php redirect

Risk 38
Severity
6.1
First published (updated )
CVE-2024-11955

GLPI-PROJECT GLPIGLPI vulnerable to unauthenticated session hijacking

Risk 76
Severity
9.3
First published (updated )
CVE-2024-50339

GLPI-PROJECT GLPIGLPI vulnerable to authenticated insecure account deletion

Risk 43
Severity
8.1
EPSS
0.07%
First published (updated )
CVE-2024-48912

GLPI GLPIGLPI vulnerable to account takeover via the password reset feature

Risk 66
Severity
7.5
First published (updated )
CVE-2024-47761

GLPI GLPIGLPI vulnerable to account takeover via API

Risk 79
Severity
8.8
First published (updated )
CVE-2024-47760
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI GLPIGLPI vulnerable to account takeover without privilege escalation through the API

Risk 79
Severity
8.8
First published (updated )
CVE-2024-47758

GLPI-PROJECT GLPIGLPI vulnerable to enumeration of users' email addresses by unauthenticated user

Risk 43
Severity
7.5
First published (updated )
CVE-2024-43416

GLPI GLPIGLPI allows API document download without rights

Risk 43
Severity
7.5
First published (updated )
CVE-2024-38370

GLPI-PROJECT GLPIGLPI has a stored XSS at src/RSSFeed.php

Risk 33
Severity
5.7
First published (updated )
CVE-2024-45611

GLPI-PROJECT GLPIGLPI has a reflected XSS in ajax/cable.php

Risk 37
Severity
6.5
First published (updated )
CVE-2024-45610
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI-PROJECT GLPIGLPI has a Reflected XSS in /front/stat.graph.php

Risk 37
Severity
6.5
First published (updated )
CVE-2024-45609

GLPI-PROJECT GLPIGLPI has an Authenticated SQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2024-45608

GLPI-PROJECT GLPIGLPI has multiple reflected XSS

Risk 37
Severity
6.5
First published (updated )
CVE-2024-43418

GLPI-PROJECT GLPIReflected XSS in Software form

Risk 37
Severity
6.5
First published (updated )
CVE-2024-43417

GLPI-PROJECT GLPIAuthenticated SQL injection in ticket form

Risk 79
Severity
8.8
First published (updated )
CVE-2024-41679
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI-PROJECT GLPIGLPI has multiple reflected XSS

Risk 37
Severity
6.5
First published (updated )
CVE-2024-41678

GLPI-PROJECT GLPIGLPI allows account takeover via SQL Injection in AJAX scripts

Risk 79
Severity
8.8
First published (updated )
CVE-2024-40638

GLPI GLPIGLPI has a stored XSS via document upload

Risk 35
Severity
6.7
First published (updated )
CVE-2024-47759

GLPI-PROJECT GLPIGLPI allows remote code execution through the plugin loader

Risk 79
Severity
8.8
First published (updated )
CVE-2024-37149

GLPI-PROJECT GLPIGLPI allows account takeover via SQL Injection in AJAX scripts

Risk 60
Severity
8.1
First published (updated )
CVE-2024-37148
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203